HN user
infosec
oops I take that back! there is an amateur band, 33cm wavelength, from 902-928mhz. Not sure if this device transmits in the band or not. Would also depend on how much power it uses to transmit.
900 mhz is not in any amateur radio band.
Maybe switch your glass to an ice cube tray. because you do know where it will go when it overflows- to the next memory address. you just don't know what side effects that may cause.
It completely depends on the type of chemical. Your scenario imagines something like radiation. Perhaps the chemical isn't incredibly toxic and can be flushed out. If someone spilled bleach you wouldn't be able to boil or filter it out but you could dilute it to where it's safe for consumption.
I don't want my fridge letting Heinz know when I'm out of ketchup so they can push ads to me either. But I'd like my fridge to tell Amazon so that new ketchup arrives when I need it. + obligatory mentions of security, privacy, etc..
I'm surprised they recognize GRE scores from that long ago. Anyways, good luck and if you don't get accepted try taking a couple of graduate-level courses somewhere else, or maybe there as a non-degree student if they allow it. Doing well would show your current academic capability, which is probably more meaningful to admissions.
Agreed. I saw the BioLite setup at Maker Faire this weekend. They have some cool products but at 33oz the stove is too heavy for my pack. This one is only 7oz.
whoosh :)
You should google for 'wireless sensor networks'. There are some really cool research projects in this field.
'a puny tactic to make the general public afraid'
This 'tactic' was classified until leaked, so I don't think its purpose is to scare the public. My guess is that they just want tons of ciphertext samples to use in future cryptanalysis work.
This could also lead to targeted attacks. there are probably a lot of no-longer-used yahoo emails still listed on people's facebook profiles which could possibly be used to pw reset. I don't think it would be a bad idea for facebook to display a notice to people w/ yahoo emails at some point before this come into effect.
I appreciate your post, but I wish you would've addressed his examples of when linked lists are less efficient instead of responding to the link bait title and calling it stupid advice. Your post was informative in its own right, though, so thanks for that.
Is there a special reason why you're asking this?
why not just link to the TED video instead of a blog that offers nothing additional? http://www.ted.com/talks/lang/en/ramesh_raskar_a_camera_that...
references?
Doesn't gmail stop these attacks without needing to force plaintext only by simply disabling images by default?
quoting a comment I read here a few months ago, the MPAA has a combined market cap of $250 billion.
Yeah. My idea isn't great, just a frustrated response to this person who claims to have been here for a long time yet still feels it's appropriate to make offensive posts about others here.
I like the idea of an incubation period, but I've seen valuable comments posted from new accounts- I bet a ton of people lurk for months before seeing a thread they feel they can make a valuable contribution to.
If people were to pick one reason HN has 'gone downhill', disrespectful comment replies would top the list.
A controversial feature request- when a new account reaches a negative karma level within a certain period, HN will display all other usernames associated with the IP address of the throwaway.
Google, George Mason University, and the NSA have been working on a secure Android kernel for a while. I doubt it will be compatible with all Android devices, but I'm sure they'll consider it reliable before rolling it out in DoD.
I'm assuming he was mocking the ignorance of the article as it addressed live memory acquisition. The author jumped to something obscure (RAM freezing) when there are forensics tools (memorize, etc) that can be used to image memory on a running machine in hopes of getting a decryption key / other passwords.
I'm listening currently (11:43a EST) and they're quoting cyber security experts about how it could undermine security. From consumer union groups about how it affects consumer safety, from venture capitalists about how it can stifle innovation. A lady right now is addressing how it's an issue that they don't have any technical expertise on the panel. It's not ALL madness..
I agree. This is the paper that started it all.
A good paper came out a few years ago that defeats ROP by adding protections to ensure that returns/calls/jumps are only taken if the function was entered at its entry point, and rearranging register allocation if the compiler creates unaligned instructions that can be used to ret/jmp. They say the performance penalty isn't huge, but I guess it must be enough if people aren't implementing it.
[1] G-Free: Defeating Return-Oriented Programming through Gadget-less Binaries (http://iseclab.org/papers/gfree.pdf)
no one was stopping you from putting on sunglasses and a hat and walking around the store before this
This only prevents brute-force password guessing, it doesn't solve the problem of the timing attack. Especially on passwords, which don't change very often. A patient attacker would try only a few attempts at a time, get timing info, then wait out the cooling period until the penalty is back down to 1 second of sleep, then repeat. Each time they gain more information which can all be put together to complete the attack.
here's a blog post Moxie wrote that explains "Trust Agility": http://blog.thoughtcrime.org/ssl-and-the-future-of-authentic...
I'm in DC as well and I find Verizon to be absolutely horrible. I had T-Mobile until last year and I regret switching.
I flew Virgin last week and they let people without carryons join with "Group A" for boarding.
1) this is not just "an antivirus". VirusTotal is a website where you go and upload a suspicious file, and they scan it. Also, this says nothing about the file being "public searchable", it says it's made available for security industry professionals.
2) yes. typically you don't attack strong crypto, you find a weakness in its implementation. In this case, RSA Security's network was that weakness.